A DarkGate malware campaign observed in mid-January 2024 leveraged a recently patched security flaw in Microsoft Windows as a zero-day using bogus software installers. “During this campaign, users were lured… Read More »DarkGate Malware Exploits Recently Patched Microsoft Flaw in Zero-Day Attack
One of the most common misconceptions in file upload cybersecurity is that certain tools are “enough” on their own—this is simply not the case. In our latest whitepaper OPSWAT CEO and Founder,… Read More »Demystifying a Common Cybersecurity Myth
The threat actors behind the PixPirate Android banking trojan are leveraging a new trick to evade detection on compromised devices and harvest sensitive information from users in Brazil. The approach… Read More »PixPirate Android Banking Trojan Using New Evasion Tactic to Target Brazilian Users
A new phishing campaign has been observed delivering remote access trojans (RAT) such as VCURMS and STRRAT by means of a malicious Java-based downloader. “The attackers stored malware on public… Read More »Alert: Cybercriminals Deploying VCURMS and STRRAT Trojans via AWS and GitHub
Google’s Gemini large language model (LLM) is susceptible to security threats that could cause it to divulge system prompts, generate harmful content, and carry out indirect injection attacks. The findings come from… Read More »Researchers Highlight Google’s Gemini AI Susceptibility to LLM Threats
Identities are the latest sweet spot for cybercriminals, now heavily targeting SaaS applications that are especially vulnerable in this attack vector. The use of SaaS applications involves a wide range… Read More »Join Our Webinar on Protecting Human and Non-Human Identities in SaaS Platforms
Microsoft on Tuesday released its monthly security update, addressing 61 different security flaws spanning its software, including two critical issues impacting Windows Hyper-V that could lead to denial-of-service (DoS) and remote code… Read More »Microsoft’s March Updates Fix 61 Vulnerabilities, Including Critical Hyper-V Flaws
Threat hunters have discovered a set of seven packages on the Python Package Index (PyPI) repository that are designed to steal BIP39 mnemonic phrases used for recovering private keys of a cryptocurrency… Read More »Watch Out: These PyPI Python Packages Can Drain Your Crypto Wallets
In a world of ever-expanding jargon, adding another FLA (Four-Letter Acronym) to your glossary might seem like the last thing you’d want to do. But if you are looking for… Read More »CTEM 101 – Go Beyond Vulnerability Management with Continuous Threat Exposure Management
A new malware campaign is leveraging a high-severity security flaw in the Popup Builder plugin for WordPress to inject malicious JavaScript code. According to Sucuri, the campaign has infected more than… Read More »Malware Campaign Exploits Popup Builder WordPress Plugin to Infect 3,900+ Sites